Who is responsible
HomeStart.page (“HomeStart”, “we” or “us”) operates the HomeStart dashboard and Help Centre. Privacy questions and data-rights requests can be sent to privacy@homestart.page. The operator’s formal legal name and service address must be added here before paid public subscriptions open.
Information we collect
- Account identity: display name, email address, account role and plan.
- Security information: password hash, sign-in sessions, IP address, browser/device description, security events, public passkey credentials, encrypted authenticator secret and recovery-code hashes.
- Dashboard content: pages, widget layout, preferences, bookmarks, notes, tasks, RSS settings and data you deliberately save.
- Connections: service URLs, usernames and encrypted API tokens or passwords for integrations you configure.
- Support information: messages you send to our support addresses.
Why we use it
We use account and dashboard data to provide the service and perform our contract with you. We use security logs, rate limits and service diagnostics for our legitimate interests in protecting HomeStart and its users. Where the law requires consent, we ask before that processing begins. We do not sell personal data or use it for behavioural advertising.
Who receives information
- Our hosting, database, DNS, email-delivery and security providers, only as needed to operate HomeStart.
- Services you choose to connect; those providers receive requests initiated through their integration and apply their own privacy terms.
- Professional advisers, regulators or law-enforcement bodies where disclosure is legally required.
International processing
Some infrastructure or connected providers may process information outside the UK. Before public paid launch, HomeStart will identify its production processors and document the safeguards used for any restricted transfer.
How long we keep it
- Your active account and saved dashboard content: until you delete it or close the account.
- Sign-in sessions: up to seven days unless revoked sooner.
- Email verification links: up to 24 hours. Password-reset links: up to 30 minutes.
- Integration credentials: until you remove the connection or close the account.
- Security and support records: only as long as reasonably needed for security, dispute handling and legal obligations. Deleted information may remain temporarily in restricted hosting backups until those backups expire.
Your rights
Depending on the circumstances, UK data-protection law may give you rights to access, correct, delete, restrict or object to processing, and to receive portable data. You may also complain to the UK Information Commissioner’s Office. Contact privacy@homestart.page to exercise a right. We normally respond within one month.
Security and changes
HomeStart uses HTTPS, password hashing, HTTP-only cookies, encryption for stored integration secrets, rate limiting, session revocation, passkeys and optional authenticator verification. No online service can promise absolute security. We review this notice as the product and law change and will highlight material updates.